I find windows firewall is very good at blocking programs/processes from accessing the network. By configure it to block svchost.exe from access network except

I find windows firewall is very good at blocking programs/processes from accessing the network. By configure it to block svchost.exe from access network except 192.168.0.0/16, the windows 10 system service can have very light load on my laptop. Combine with ProcessExplorer to monitor various processes's network traffic, I can make my laptop where the only two programs can access the internet are Firefox and Chrome. Once every 6-9 months, when I feel like it, I do release the svchost.exe from the jail for a day to free win10 to get the latest security update. With this setup, I can make the Win10 home edition laptop to have system uptime of 6 months or more.